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IN THE CLAIMS; 

1. (Currently amended) A computer system that determines authorization privileges 
for resources for a user, the system comprising: 

a file system on which the resources reside; 

a first software; and 

the first software acting to: 

intercept an authorization request from the user for a particular resource; 
search a cache to determine if the resource may be accessed by the user, 
the cache containing results of prior authorization request s, wherein the cache comprises 
an inherited cache portion and a direct cache portion, and wherein a determination is 
made as to which of the inherited cache portion and the direct cache portion to access ; 
and 

selectively authorize or deny the use of the resource based upon a result of 
the search of the cache. 

2. (Currently amended) The computer system of claim 1 wherein the first software 
authorizes or denies the use of the resource based upon one or more predetermined 
parameters , wherein the cache comprises both a grant field and a deny field which are 
used bv the first software to determine whether to .grant or deny the use of the resource . 

3. (Currently amended) The computer system of claim £ 1 wherein the first 
software authorizes or denies the use of the resource based upon one or more 
predetermined parameters , the one or more predetermined parameters comprising a 
requesting resource identifier of a resource requesting the particular resource . 

4. (Original) The computer system of claim 2, the one or more predetermined 
parameters comprising a user ID. 
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5. (Currently amended) The computer system of claim 2, the one or more 
predetermined parameters comprising a time of day indicating lifetime of a given 
resource entry in the cache . 

6. (Currently amended) The computer system of claim 1 wherein the search of the 
cache is based on a key, the key derived from hashing one or more search parameters. 

7. (Original) The computer $ystem of claim 6, the one or more search parameters 
comprising an FID. 

8. (Original) The computer system of claim 1, the first software further acting to 
initiate an authorization protocol that determines an authorization status of the resource 
when the search of the cache of authorization requests fails to reveal any previous 
requests. 

9. (Currently amended) The computer system of claim 8, wherein the results of the 
authorization protocol to determine an authorization status of the resource are added to 
the cach e, wherein a determination is made as to which of the inherited cache portion and 
the direct cache portion to add the results to . 

10. (Currently amended) A method to determine authorization privileges, for 
resources for a user of a computer system, the method comprising: 

Intercepting intercepting an authorization request for access from the user for a 
particular resource; 

hashing at least a portion of the authorization request to generate a hash value: 
Searching s_eardiing a cache of prior authorization requests to determine if the 
resource may be accesse d, wherein the cache comprises a plurality of tables and a given 
one of the plurality of tables is selected based on the hash value : and 

if a hit is made in the cache, selectively deciding the authorization request based 
at least in part on information found in the cache. 
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1 1. (Currently amended) The method of clam 10 further comprising: 
determining the resource authorization based upon one or moro predetermined 

parameters associated with the reques t wherein the predetermined parameters comprise 
granted actions an d denied actions maintained in the tables . 

12. (Currently amended) The method of claim 1 1, tho one or more predetermined 
param e t e rs comprising a requesting resource id e ntification 10, farther comprising 
determining the resource authorization based upon predetermined parameters associated 
with the request, w herein the predetermined parameters comprise an expire time of when 
a given entry in the cache expires . 

13. (Currently amended) The method of claim 1 1 , tho on e or mor e predetermined 
paramet e rs comprioing a user id e ntification 10. further comprising determining the 
resource authorization based upon predetermined parameters associated with the request, 
wherein the predetermined parameters comprise an identifier of an accessing 
application's binary file , 

14. (Currently amended) The method of claim 1 1 , the en e- or e mor e predetermined 
parameters comprising a time indicating lifetime of a given resource entry in the cache . 

15. (Original) The method of claim 10 wherein an outcome of the step of searching is 
based at least in part upon an FDD. 

16. (Original) The method of claim 10 further comprising: 

initiating an authorization protocol to determine an authorization status of the 
resource when the step of searching fails to reveal any requests* 

17. (Currently amended) The method of claim 16 further comprising: 
saving in the cache the results of the authorization protocol to determine an 

authorization status of the resourc e, wherein the cache comprises an inherited cache 
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portion and a direct cache portion, and wherein a determination is made as to which of 
the inheri ted cache portion and the direct cache portion to add the results to . 

18. (Currently amended) A computer program product on a computer useable 
medium, the computer usable medium having a computer usable program embodied 
therein for preprocessing an incoming request for information from a user over network, 
the information stored on one or more source servers communicatively coupled to a 
computing system, the computer usable program including: 

instructions for intercepting an authorization request for access from the user for a 
particular resource; 

instructions for searching a cache of prior authorization requests to determine if 
the resource may be accessed; and 

instructions for selectively deciding the authorization request based at least in part 
on information found in the cach e, wherein the authorization request comprises an 
identifier of an application that generated the authorization request . 

19. (Original). The computer program product of claim 18 further comprising; 
instructions for determining the resource authorization based upon one or more 

predetermined parameters associated with the request. 

20. (Currently amended) The computer program product of claim 19, the one or more 
predetermined parameters comprising a requesting resource identification from a 
previous authorization request . 

21 . (Currently amended) Hie computer program product of claim 19, the one or 
more prodotorminod param e t e ro oompriaing a uflcr identification 18. wherein the cache 
comprises an inheritance cache portion and a direct cache portion, and further comprising 
instructions for determining which of the inherited cache portion and the direct cache 
portion to access . 
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22. (Currently amended) The computer program product of claim 19, the one or more 
predetermined parameters comprising a time indicating lifetime of a given resource entry 
in the cache . 

23. (Original) The computer program product of claim 18 wherein an outcome of the 
instructions for searching is based at least in part upon an FID. 

24. (Original) The computer program product of claim 1 8 further comprising: 
instructions for initiating an authorization protocol to determine an authorization 

status of the resource when the instructions for searching fail to reveal any requests. 

25. (Currently amended) The method of claim 24 further comprising: 
instructions for saving in the cache the results of the authorization protocol to 

determine an authorization status of the resourc e, wherein the_cache comprises an 
inherited c ache portion and a direct cache portion, and further comprising instructions for 
determining which of the inherited cache portion and the direct cache portion to add the 
results to. 
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